You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/capture-hardware/af-packet.rst

32 lines
608 B
ReStructuredText

.. _afpacket:
AF_PACKET
#########
Introduction
************
AF_PACKET is a capture interface to the Linux Kernel.
Config Options
**************
enable-hwtimestamp
==================
Boolean option to enable hardware timestamping on an interface.
By default the hardware timestamping support is disabled.
Hardware timestamping can lead to issue of the NIC and kernel getting out of sync. See
`ticket 7585 <https://redmine.openinfosecfoundation.org/issues/7585>`_.
::
af-packet:
- interface: eth0
cluster-id: 99
enable-hwtimestamp: true
cluster-type: cluster_flow